Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3230363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Q6eMF/ODPSYempy3Aq17zTvO/53ACTsO4UqXWg73ajs=
Subject key identifier: 47:47:7C:39:8E:16:35:2D:12:95:EF:10:69:62:E6:73:3D:CC:F0:97
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0836B62F4E2504B089E17FF43927248E364EADDC
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:22 +0000
ROA not before: Mon 26 Sep 2022 07:57:22 +0000
ROA not after: Mon 25 Sep 2023 08:02:22 +0000
asID: 59282
IP address blocks: 2400:d680:206::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:36:b6:2f:4e:25:04:b0:89:e1:7f:f4:39:27:24:8e:36:4e:ad:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:22 2022 GMT
Not After : Sep 25 08:02:22 2023 GMT
Subject: CN=47477C398E16352D1295EF106962E6733DCCF097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:26:20:9a:40:06:27:18:e6:b2:04:cf:ec:
fc:63:35:ab:14:32:9a:c4:a4:d8:41:59:ed:2d:9b:
ff:dc:1b:53:83:ba:51:e4:18:c7:33:d5:65:c7:92:
23:02:e8:36:db:6d:c8:d7:f4:a2:59:63:ab:20:82:
77:f4:4c:2c:df:1a:c5:95:df:92:65:53:e2:d4:78:
3f:9d:43:e8:09:73:da:18:ba:67:50:35:a6:83:b6:
42:fa:fa:64:fc:44:bf:22:f4:05:45:d4:fd:95:8c:
32:61:f7:f0:9a:ec:00:41:e0:a2:db:a6:47:09:7f:
4b:53:b1:9b:27:b9:34:73:5e:33:4a:e0:b4:7d:ff:
a9:9f:fd:12:cc:43:ca:e8:bb:b1:22:bb:5e:ef:f3:
a5:65:3a:85:ee:53:1d:ed:38:d4:18:80:90:01:ea:
84:c2:c6:1a:9c:f6:1f:59:9b:2d:c0:fe:34:ea:89:
1d:23:95:c9:e9:32:44:7d:56:5d:d3:a9:1e:69:71:
24:63:65:9a:ed:aa:a9:fb:af:ca:65:4c:31:1b:53:
8d:20:b5:71:ed:93:3b:31:0c:a4:fe:09:c0:5a:89:
14:e7:69:70:bd:7a:d7:8f:12:90:85:76:c5:36:d9:
57:e3:4c:d2:78:3d:15:91:67:95:14:26:12:38:58:
ba:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:47:7C:39:8E:16:35:2D:12:95:EF:10:69:62:E6:73:3D:CC:F0:97
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:206::/48
Signature Algorithm: sha256WithRSAEncryption
40:c1:8c:2a:ff:c6:c8:6d:4b:6b:f0:02:be:6d:36:78:81:f7:
59:91:72:97:6d:2b:cd:01:07:5d:ee:79:cc:b0:3b:1a:69:92:
fe:f3:f2:8e:8d:14:a4:c4:64:bb:af:2a:3a:9b:ad:34:6e:50:
ba:89:8d:de:07:a0:bc:b0:79:3c:53:05:2b:06:5f:4a:b0:3f:
60:78:6d:a0:93:8d:e1:5c:b3:8c:00:a5:ef:7f:d3:c4:3d:ca:
35:41:04:bf:3f:74:09:9b:5e:00:e1:f8:17:c4:ec:ec:51:65:
d4:41:d4:29:7f:e5:0d:6e:54:9d:ae:9a:19:16:50:e0:b7:ac:
4b:f2:2a:5c:c5:71:68:1e:2b:3c:d2:06:90:84:07:57:b6:c8:
cf:cd:9f:78:3a:1e:aa:65:b1:7f:f6:13:87:db:08:2d:92:ec:
80:09:91:06:b7:e9:55:49:50:7e:be:65:5d:84:b5:aa:8f:56:
6e:d9:77:05:15:c3:19:42:02:e9:4a:d9:f9:0c:62:65:b1:60:
fd:83:16:16:a2:8b:e4:5c:75:dd:15:37:7a:48:9f:88:ad:77:
be:ee:91:cd:f4:87:e2:2e:89:07:f8:27:a7:09:de:28:dd:c3:
82:9c:85:32:46:99:06:31:53:89:fe:91:9a:ed:70:9a:be:4a:
fc:40:6d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org